General
- Target C11Setup.exe
- Size 252KB
- Sample240419-p9wpwsdb29
- SHA256 bf09875cb64f8b5c5b645baaaf6df787dc41d8c2289300fcebd5f66ccc7768a0
- MD5 13c8c7c417560e47443b11750d2255ae
- SHA1 6ab9f5bf50b393607ac4c76c128fdbe66e602a11
- SHA512 4619a8f2ee35bc49d478053ad2cc3b8f33d550495e38483f4de88b8bd7a90b211b4eda8da8e0d3a57ab606864e7f980128c4f657fa8dd4bea03fefa6c08a6d56
- SSDEEP 3072:oUmcx4yVy6PMV2DFgTH1bm09nQCR7c2ytBcL5BdkwvTkmEdiYY:oQy6PMVkuVb5pHWwvqdf
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
asyncrat
Version
-
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Botnet
-
Default
C2
-
127.0.0.1:4449
-
127.0.0.1:6555
-
127.0.0.1:0
-
127.0.0.1:4040
Mutex
-
oimkvkcrdcknatuxz
Attributes
-
delay
1
-
install
true
-
install_file
C11Setup.exe
-
install_folder
%Temp%
aes.plain
Targets
-
- Target C11Setup.exe
- Size 252KB
- SHA256 bf09875cb64f8b5c5b645baaaf6df787dc41d8c2289300fcebd5f66ccc7768a0
- MD5 13c8c7c417560e47443b11750d2255ae
- SHA1 6ab9f5bf50b393607ac4c76c128fdbe66e602a11
- SHA512 4619a8f2ee35bc49d478053ad2cc3b8f33d550495e38483f4de88b8bd7a90b211b4eda8da8e0d3a57ab606864e7f980128c4f657fa8dd4bea03fefa6c08a6d56
- SSDEEP 3072:oUmcx4yVy6PMV2DFgTH1bm09nQCR7c2ytBcL5BdkwvTkmEdiYY:oQy6PMVkuVb5pHWwvqdf
- MD5 SHA1 SHA512 SSDEEP
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.